openSUSE 16 Security Update : python-pymongo (openSUSE-SU-2026:22003-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22003-1 advisory. Changes in python-pymongo: - CVE-2026-96749: integer overflow in BSON document encoding allows an unprivileged user to write outside the bounds ...

CVE-2014-125130: Improper Limitation of a Pathname to a Restricted Directory

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

PT-2026-104437

Name of the Vulnerable Software and Affected Versions Armatura One affected versions not specified Description The database initialization routine assigns a fixed, vendor-defined password to the database superuser account during creation instead of generating a unique password for each...

PT-2026-104092

The BuildKit WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level users before storing it and later using it in a SQL query, allowing a Contributor to inject SQL that runs against the database once the resulting content is published and viewed b...

PT-2026-104151

The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2026-104872: Insertion of Sensitive Information into Log File

OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting telemetry from JavaScript applications. Prior to versions 0.66.0 of @opentelemetry/instrumentation-cassandra-driver, 0.65.0 of @opentelemetry/instrumentation-knex, 0.67.0 of @opentelemetry/instrumentation-mongoose,...

CVE-2026-94592: Use of Hard-coded Credentials

Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password per installation. An individual with access to the server operating system and knowledge of this value can...

Linux Distros Unpatched Vulnerability : CVE-2026-93546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and...

VulnCheck KEV: CVE-2014-125130

CodeArt Google MP3 Audio Player plugin google-mp3-audio-player for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to retrieve sensitive files by supplying a path-traversal payload in the file parameter of directdownload.php...

CVE-2025-11077

CVE-2025-11077 - SQL Injection Author: Byte Reaper Description This vulnerability is a Blind SQL Injection in the addcontent.php file of the Online Learning Management System CVE-2025-11077, allowing an attacker to extract database information by sending crafted POST requests. Requirements : Linu...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Author: Byte Reaper Description CVE-2025-10046 is a SQL injection vulnerability in the ELEX WooCommerce Google Shopping Product Feed plugin for WordPress, versions 1.4.3 and earlier. The issue resides in the includes/elex-manage-feed-ajax.php file...

CVE-2026-93546

A flaw was found in httpd. An integer overflow in the moddavfs module occurs when processing Web Distributed Authoring and Versioning WebDAV PROPPATCH requests that declare an excessive number of XML namespaces. An authenticated remote attacker with write access can exploit this flaw to crash...

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-Vulnerabilidad-de-Inyección-SQL Autor del exploit: ugurkarakoc Página del proveedor https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Enlace del software https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826 Resumen...

vFeed

CONSULTA LA NUEVA LIBRERÍA https://github.com/vfeedio/pyvfeed vFeed, el Wrapper de la Base de Datos Correlacionada de Vulnerabilidades e Inteligencia de Amenazas vFeed Python Wrapper / Database es un concepto de esquema de nomenclatura compatible con CVE, CWE y OVAL que proporciona referencias...

pocindex

Recién llegados Stars| Actualizado| Repositorio| Descripción ---|---|---|--- 0⭐| hace 46m| CVE-2025-47947| POC para libapache2-mod-security2 0⭐| hace 9h| CVE-2025-8110| El manejo inadecuado de enlaces simbólicos en la API PutContents de Gogs permite la ejecución local de código. 1⭐| hace 1d|...

RFC-Security-Research

RFC-Security-Research Documento original y scripts auxiliares para ayudar a analizar los aspectos de seguridad de los RFC de Internet. Descripción general Este repositorio alberga una revisión de la seguridad de los RFC redactada al estilo de un RFC, además de varios scripts auxiliares de Python...

thingernet-graph

thingernet-graph Script de Python para generar la representación Cypher de neo4j de una colección de dispositivos IoT para su visualización y consulta. El script lee un directorio de archivos JSON que describen 'cosas' y crea el texto Cypher de neo4j relevante para importar a neo4j con el fin de...

CVE-2026-67401

CVE-2026-67401 Inyección SQL en cPanel EmailTrack. Un usuario autenticado de cPanel con privilegios de correo escribe archivos arbitrarios como root mediante SQLite ATTACH DATABASE. Una sola petición hasta root. No lo he probado en un objetivo real, el código solo está armado a partir de...

chrome-vuln-scanner

Escáner de Vulnerabilidades de Chrome Una herramienta defensiva ligera y sin dependencias que verifica la versión instalada de Google Chrome frente a vulnerabilidades conocidas y genera un informe HTML visual fácil de entender. Herramienta defensiva ligera para verificar la versión de Google Chro...

CVE-2026-72898-metabase-sqli

CVE-2026-72898 — Inyección SQL no autenticada en Metabase detector + análisis -black Inyección SQL no autenticada en Metabase a través de POST /api/session/resetpassword. CVSS 10.0 , en el catálogo CISA KEV, explotada activamente en la naturaleza. Un campo no declarado en el cuerpo de la solicitu...